diff --git a/tool/cmdline.ggo b/tool/cmdline.ggo
index c533ba6..ad8a672 100644
--- a/tool/cmdline.ggo
+++ b/tool/cmdline.ggo
@@ -43,7 +43,8 @@ text   "
        9c is for Digital Signature (PIN always checked)
        9d is for Key Management
        9e is for Card Authentication (PIN never checked)
-       82-95 is for Retired Key Management\n"
+       82-95 is for Retired Key Management
+       f9 is for Attestation\n"
 option "algorithm" A "What algorithm to use" values="RSA1024","RSA2048","ECCP256","ECCP384" enum optional default="RSA2048"
 option "hash" H "Hash to use for signatures" values="SHA1","SHA256","SHA384","SHA512" enum optional default="SHA256"
 option "new-key" n "New management key to use for action set-mgm-key, if omitted key will be asked for" string optional